73,927 packages matching “rug-pull”

@taskmagic/apps-chain-aware

v0.0.1 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

ChainAware.AI piece for TaskMagic — detect risky wallet behavior, fraud probability, credit scores, rug-pull risk, and wallet segmentation.

4Downloads across all versions in the last 7 days, from the official npm downloads API.

No known vulnerabilities

Known vulnerabilities affecting v0.0.1 (the latest release), from the OSV.dev database.

@buildbench/mcp-security-scanner

v1.1.0 · 3 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Static security scanner for Model Context Protocol (MCP) servers. Detects tool-description poisoning, exfiltration cues, hidden-unicode payloads, arbitrary command execution, SSRF surface, hardcoded secrets, and rug-pull risk. Runs locally for Cursor and

6Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.1.0 (the latest release), from the OSV.dev database.

@sengol/instrument

v0.1.1 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

TypeScript MCP tool-hash producer for Sengol rug-pull detection (ADR-0105/ADR-0107) — decorates an MCP Transport, hashes tool definitions byte-identically to the Python producer, and delivers them to a Sengol server.

5Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.1 (the latest release), from the OSV.dev database.

cavion-sdk

v0.1.3 · 5 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

AI-powered Solana rug pull detector SDK & CLI

1Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.3 (the latest release), from the OSV.dev database.

@opensyber/mcp-watch

v0.1.0 · 3 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

MCP rug-pull detection. Records SHA-256 fingerprints per tool, per server, across days — catches what session-scoped scanners miss.

2Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

soliris-mcp

v0.6.1 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Soliris — Solana MCP Server. 46 tools: rug-pull & scam detection (9+ on-chain signals, bundle/coordinated-launch analysis, holder concentration, Rugcheck score), Birdeye Data integration (trending tokens, new-listing radar, token overview, security check)

4Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.6.1 (the latest release), from the OSV.dev database.

@agentrisk/agentkit

v1.0.0 · 12 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The pre-trade safety net your Coinbase AgentKit agent didn't know it needed. Live sell simulation across every DEX on Base (Uniswap V2/V3/V4, Aerodrome), catching traps a static scan will never see. Honeypot detection, rug-pull risk, deployer history. x40

149Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.0 (the latest release), from the OSV.dev database.

@agentrisk/ai-sdk

v1.0.0 · 12 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The pre-trade safety net your Vercel AI SDK agent didn't know it needed. Live sell simulation across every DEX on Base (Uniswap V2/V3/V4, Aerodrome), catching traps a static scan will never see. Honeypot detection, rug-pull risk, deployer history. x402-po

153Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.0 (the latest release), from the OSV.dev database.

n8n-nodes-crypto-token-safety-scanner

v1.0.0 · 2 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

n8n community node: multi-chain token safety scanner — honeypot and rug-pull check with a 0-100 score across EVM and Solana.

7Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.0 (the latest release), from the OSV.dev database.

readable-stream

v4.7.0 · 1 year ago

95
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Node.js Streams, a user-land copy of the stream library from Node.js

316.6MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.7.0 (the latest release), from the OSV.dev database.

honeypot-guard

v1.0.0 · 1 month ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Gate your trading bot's buys behind a honeypot / rug-pull check. One call before every buy — verdict OK/CAUTION/HIGH_RISK/AVOID across 8 chains. Pay-per-check in USDC via x402, no API key.

3Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.0 (the latest release), from the OSV.dev database.

exceljs

v4.4.0 · 2 years ago

90
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Excel Workbook Manager - Read and Write xlsx and csv Files.

13.7MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v4.4.0 (the latest release), from the OSV.dev database.

crypto-safety-check

v1.0.0 · 5 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

On-chain token safety checker — honeypot detection, rug pull analysis, ownership concentration, tax checks via GoPlus API

3Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.0 (the latest release), from the OSV.dev database.

@wasmagent/mcp-firewall

v2.2.1 · 2 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Runtime firewall for MCP and tool-augmented agents — descriptor integrity, static vetting, per-call policy, taint tracking, consent ledger

321Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v2.2.1 (the latest release), from the OSV.dev database.

rug-scanner-mcp

v0.1.0 · 5 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

MCP server for on-chain token rug pull risk analysis. 7 parallel checks, deterministic scoring. $0.05 USDC per scan via x402 on Base.

3Downloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.1.0 (the latest release), from the OSV.dev database.

@n1ru4l/push-pull-async-iterable-iterator

v3.2.0 · 4 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

[![TypeScript](https://img.shields.io/badge/%3C%2F%3E-TypeScript-%230074c1.svg)](http://www.typescriptlang.org/) [![npm version](https://img.shields.io/npm/v/@n1ru4l/push-pull-async-iterable-iterator)](https://www.npmjs.com/package/@n1ru4l/push-pull-async

899.4KDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.2.0 (the latest release), from the OSV.dev database.

alien-signals

v3.2.1 · 4 months ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

The lightest signal library.

8.3MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v3.2.1 (the latest release), from the OSV.dev database.

@techteamer/ocsp

v1.0.1 · 3 years ago

85
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

OCSP Stapling implementation

1.9MDownloads across all versions in the last 7 days, from the official npm downloads API.MITLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v1.0.1 (the latest release), from the OSV.dev database.

regjsparser

v0.13.3 · 14 hours ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

Parsing the JavaScript's RegExp in JavaScript.

49.7MDownloads across all versions in the last 7 days, from the official npm downloads API.BSD-2-ClauseLicense declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.13.3 (the latest release), from the OSV.dev database.

toolprint

v0.3.1 · 27 days ago

100
0-100 score computed by this site from verifiable signals only: known OSV.dev advisories affecting this exact version, how recently it was published, and the repository's OpenSSF Scorecard.

package-lock.json for MCP trust — scan MCP servers and skill bundles for tool poisoning, secret leaks, and silent rug-pulls, with a committed, reviewable lockfile.

22Downloads across all versions in the last 7 days, from the official npm downloads API.Apache-2.0License declared in the package manifest.

No known vulnerabilities

Known vulnerabilities affecting v0.3.1 (the latest release), from the OSV.dev database.
Prev2 / 50Next